vfscnry
Static task
static1
Behavioral task
behavioral1
Sample
48c296927f37dd6bc17d760571335040.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
48c296927f37dd6bc17d760571335040.dll
Resource
win10v2004-20220812-en
General
-
Target
48c296927f37dd6bc17d760571335040.exe
-
Size
43KB
-
MD5
48c296927f37dd6bc17d760571335040
-
SHA1
4dcdbd8b96ab4d2a0e77bf5edbbb569f86af75c3
-
SHA256
2253bd9d3cb1a15da4528f32d3e50df306aa81c60b62681c0aa5a79e82d5f712
-
SHA512
7290c7cbe601d91a1ed2a20a510c453effa59e64aea16bc3bf544327f329782ac85a25354adcd1d8be5b76ecaff5b2411bd382fc5fe16c21b85b944d585e8378
-
SSDEEP
768:NqoA47+dPA7/lAqur0c3s9JVuo7Srf2bBNW7xEDZ31xnEexT/HIKr:NqoA47+d2AqO0cOuoWfgOdmZ3P5xTR
Malware Config
Signatures
Files
-
48c296927f37dd6bc17d760571335040.exe.dll windows x64
f9ade0aa18f660a34a4fa23392e21838
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
kernel32
ExitProcess
Exports
Exports
Sections
.ndouf Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.drmou Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yrlwj Size: 512B - Virtual size: 61B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wjuqr Size: 1024B - Virtual size: 839B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE